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AMENDMENTS TO THE CLAIMS 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

1 . (Currently amended) A method comprising: 

querying a file that defines a protocol for which protocol support is to be added to 
a network traffic generation and analysis tool to process network traffic; 

determining from the queried file how packets for the protocol are constructed; 

building a protocol runtime specification based on how packets for the protocol 
are constructed, the protocol runtime specification specifying how packets for the 
protocol are processed by the network traffic generation and analysis tool; 

receiving packets for the protocol; and 

processing data from the received packets in the network traffic generation and 
analysis tool in accordance with the protocol runtime specification, including translating 
data from the received packets into a proper format for analyzing traffic in the network 
traffic generation and analysis tool. 

2. (Original) The method of claim 1, wherein the file is written in an 
Extensible Markup Language (XML). 

3. (Original) The method of claim 1, further comprising determining from 
the file how to display one or more user interface elements. 
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4. (Original) The method of claim 1, wherein determining from the queried 
file how packets for the protocol are constructed comprises determining whether there are 
one or more protocol encapsulations. 

5. (Original) The method of claim 1, wherein determining from the queried 
file how packets for the protocol are constructed comprises determining a field type of 
one or more fields for the protocol. 

6. (Original) The method of claim 1, wherein determining from the queried 
file how packets for the protocol are constructed comprises determining a field size of 
one or more fields for the protocol. 

7. (Original) The method of claim 1, wherein determining from the queried 
file how packets for the protocol arc constructed comprises determining a default value of 
one or more fields for the protocol. 

8. (Original) The method of claim 1, wherein determining from the queried 
file how packets for the protocol are constructed comprises determining whether there is 
a calculation to be performed for one or more fields of the protocol. 

9. (Currently amended) An apparatus comprising: 
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a storage element to store a file that defines a protocol for which protocol support 
is to be added to a network traffic generation and analysis tool to process network traffic; 
and 

a translation unit coupled to the storage element to query the file to determine 
how packets for the protocol are constructed and to build a protocol runtime specification 
for the protocol, the protocol runtime specification specifying how packets for the 
protocol are processed by the network traffic generation and analysis tool; and 

the translation unit to further process data from the received packets in the 
network traffic generation and analysis tool in accordance with the protocol runtime 
specification, including translating data from the received packets into a proper format 
for analyzing traffic in the network traffic generation and analysis tool. 

10. (Original) The apparatus of claim 9, further comprising a network 
interface coupled to the translation unit. 

1 1 . (Original) The apparatus of claim 9, wherein the stored file is written in an 
Extensible Markup Language (XML). 

12. (Original) The apparatus of claim 9, wherein the translation unit further 
determines from the file how to display one or more user interface elements. 

13. (Currently amended) An article of manufacture comprising: 
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a machine accessible medium including content that when accessed by a machine 
causes the machine to: 

query a file that defines a protocol for which protocol support is to be 
added to a network traffic generation and analysis tool to process network traffic; 

determine from the queried file how packets for the protocol are 
constructed; 

build a protocol runtime specification based on how packets for the 
protocol are constructed, the protocol runtime specification specifying how 
packets for the protocol are processed by the network traffic generation and 
analysis tool; 

receive packets for the protocol in the network traffic generation and 
analysis tool; and 

process data from the received packets in the network traffic generation 
and analysis tool in accordance with the protocol runtime specification, including 
translating data from the received packets into a proper format for analyzing 
traffic in the network traffic generation and analysis tool. 

14. (Original) The article of manufacture of claim 13, wherein the file is 
written in an Extensible Markup Language (XML). 

15. (Original) The article of manufacture of claim 13, wherein the machine- 
accessible medium further includes content that causes the machine to determine from the 
file how to display one or more user interface elements. 
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16. (Original) The article of manufacture of claim 13, wherein the machine 
accessible medium including content that when accessed by the machine causes the 
machine to determine from the queried file how packets for the protocol are constructed 
comprises the machine accessible medium including content that when accessed by the 
machine causes the machine to determine whether there are one or more protocol 
encapsulations. 

17. (Original) The article of manufacture of claim 13, wherein the machine 
accessible medium including content that when accessed by the machine causes the 
machine to determine from the queried file how packets for the protocol are constructed 
comprises the machine accessible medium including content that when accessed by the 
machine causes the machine to determine a field type of one or more fields for the 
protocol. 

18. (Original) The article of manufacture of claim 13, wherein the machine 
accessible medium including content that when accessed by the machine causes the 
machine to determine from the queried file how packets for the protocol are constructed 
comprises the machine accessible medium including content that when accessed by the 
machine causes the machine to determine a field size of one or more fields for the 
protocol. 

19. (Original) The article of manufacture of claim 13, wherein the machine 
accessible medium including content that when accessed by the machine causes the 
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machine to determine from the queried file how packets for the protocol are constructed 
comprises the machine accessible medium including content that when accessed by the 
machine causes the machine to determine a default value of one or more fields for the 
protocol. 

20. (Original) The article of manufacture of claim 13, wherein the machine 
accessible medium including content that when accessed by the machine causes the 
machine to determine from the queried file how packets for the protocol are constructed 
comprises the machine accessible medium including content that when accessed by the 
machine causes the machine to determine whether there is a calculation to be performed 
for one or more fields of the protocol. 

2 1 . (Currently amended) A system comprising: 

a storage element to store a file that defines a protocol for which protocol support 
is to be added to a network traffic generation and analysis tool to process network traffic; 

a translation unit coupled to the storage element to query the file to determine 
how packets for the protocol are constructed and to build a protocol runtime specification 
for the protocol, the protocol runtime specification specifying how packets for the 
protocol are processed by the network traffic generation and analysis tool, the translation 
unit further to receive packets for the protocol and to process data from the received 
packets in; the network traffic generation and analysis tool in accordance with the 
protocol runtime specification, including translating data from the received packets into a 
proper format for analyzing traffic in the network traffic generation and analysis tool; 
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a network interface coupled to the translation unit; and 
a network driver coupled to the network interface. 

22. (Original) The system of claim 21, wherein the stored file is written in an 
Extensible Markup Language (XML). 

23 . (Original) The system of claim 2 1 , wherein the translation unit further 
determines from the file how to display one or more user interface elements. 
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